m THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

1. (Currently amended) A method for remotely activating a covert service channel 
comprising: 

using a transport mechanism to send a trigger from a remote client to a host; 
receiving the trigger; 
authenticating the trigger; and 

opening the covert service channel to allow a connection with the remote host. 

2. (Currently amended) A method for remot e ly activating a servic e channel as recited in 
claim 1 wherein using a transport mechanism to send a trigger further includes using a protocol 
to format the transport mechanism. 

3. (Currently amended) A method for remotely activating a service channel as recited in 
claim 1 wherein using a transport mechanism to send a trigger further includes using a 
backscatter effect as the trigger. 

4. (Currently amended) A method for remotely activating a service chonn et as recited in 
claim 1 wherein opening the service chaimel on the host further includes opening a port. 

5. (Currently amended) A method for r e motely activating a service channel as recited in 
claim 1 wherein opening die service channel on the host further includes sending a reply to the 
remote client 

6. (Currently amended) A method for remotely activating a service channel as recited in 
claim 1 wherein opening the service channel on the host further includes spawning a service if 
the trigger is authenticated. 
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7. (Currently amended) A method for remotely activating a service channel as recited in 
claim 1 wherein opening the service channel on the host further includes establishing a 
connection between the remote client and a service on the host. 

8. (Currently amended) A method for remotely activating a s e rvice chann e l as recited in 
claim 1 wherein opening the service channel on the host further includes receiving a request 
from the remote client 

9. (Currently amended) A method for remotely activating a servic e channel as recited in 
claim 1 wherein opening the service channel on the host further includes sending a response by 
an operating system on the host to the remote client. 

10. (Currently amended) A method for remotely activating a service chann e l as recited in 
claim 1 wherein opening the service channel on the host further includes sending an address 
from the host to the remote client for establishing the connection. 

1 1. (Currently amended) A system for remotely activating a covert service channel 
comprising: 

a transport mechanism for sending a trigger from a remote client to a host; and 
a stealth application on the host for receiving the trigger from the remote client, 

authenticating the trigger on the target host, and opening the covert service channel on the host to 

allow a connection with the remote client. 

12. (Currently amended) A system for r e mot e ly activating a service channel as recited in 
claim 1 1 wherein the transport mechanism is installed on the host 

13. (Currently amended) A system for remotely activating a s e rvice channel as recited in 
claim 1 1 wherein the trigger is a data packet. 

14. (Currently amended) A system for remotely activating a service chann el as recited in 
claim 1 1 wherein the trigger is a pre-defined sequence of packets. 
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15. (Currently amended) A system for remotely activating a s ervice chann el: as recited in 
claim 1 1 wherein the trigger is a backscatter data packet. 

16. (Currently amended) A method for remotely activating a covert service channel 
comprising: 

receiving a trigger at a port on a host; 
suppressing a response to the trigger; 
authenticating the trigger; and 

activating the covert service channel by opening the port on the host if the trigger is 
authenticated. 

17. (Currently amended) A method for remotely activating a covert service channel 
comprising: 

[[S]]sending a pre-defined trigger to a port on a host; 
[[W]]waiting for a pre-defined time period; 

[[S]]sending a connection request to the port on the host after the pre-defined time period 
has expired; and 

[[E]]establishing a connection over the covert service channel with the host. 

18. (Currently amended) A method for remotely activating a covert service channel 
comprising: 

receiving a trigger at a service port on a host remotely communicating with a server; 
directing an operating system to suppress sending a response to the trigger; 
authenticating the trigger based on a characteristic of the trigger; and 
opening the service port on the host to permit a connection to occur over the covert 
service channel. 

19. (Original) A computer program product for remotely activating a covert service 
channel, the computer program product being embodied in a computer readable medium and 
comprising computer instructions for: 

using a transport mechanism to send a trigger from a remote host to a target host; 
receiving the trigger by a stealth application on the target host; 
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authenticating the trigger on the target host; and 

opening the covert service channel on the target host to allow a connection with the 
remote host. 

20. (CanceUed) 
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